Follow My Blog Post – WordPress / WooCommerce Plugin
File type
ZIP archive
File size
0.58 MB (607,734 bytes)
Uncompressed size
1.80 MB
Oldest file
2026-10-24 19:13
Newest file
2026-10-24 19:13
Archive contents
Contained entries
189
Files
189
Directories
0
Distinct types
10
Analysis history
Last analysis
Oct 26, 2026, 06:53 PM UTC
Engine
ClamAV 1.5.4
Signature database
v28115
Product ID
#199413
Archive contents
189 entries · 10 types
PNG38.6%73
PHP34.4%65
JavaScript9.5%18
GIF8.5%16
CSS6.3%12
Text0.5%1
XML0.5%1
POT0.5%1
DB0.5%1
No Ext0.5%1
Largest files
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · includes
c952cd7dd2ebb207…
114.1 KB
JS · includes/meta-boxes/js/select2
a289ef6548dd12d7…
89.4 KB
PHP · includes/admin
fbfed7fea5d903aa…
84.0 KB
PHP · includes
cf326f9d02209c2d…
74.0 KB
PNG · includes/images
b8449c5dd427bcce…
73.9 KB
JS · includes/js
79e73978bcd7f263…
67.2 KB
POT · languages
e6a89fbf552d347d…
65.3 KB
JS · includes/meta-boxes/js/jquery-ui
66cf1889a76752e0…
60.8 KB
Code signals
4 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation15
eval (JavaScript)
Executes a string as code
Code execution2
curl_exec
Makes an outbound HTTP request
Remote request1
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.